Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: iPePFrCeFMUskj6yA9Bnbe6ERcBOytFYjfhCAvyaPsI=
Subject key identifier: 9C:11:37:A6:31:E9:18:9C:10:A7:16:6E:36:20:1E:50:BD:6A:01:8C
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 0197CCBA55B396104598F2FAC14BE075EF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0BF9
Signing time: Wed 02 Jul 2025 20:00:53 +0000
Manifest this update: Wed 02 Jul 2025 20:00:53 +0000
Manifest next update: Thu 03 Jul 2025 20:00:53 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: yZksNZ0npn5iN/DwT1YMd4SVrPySXoomWPiT56tdbS0=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:55:b3:96:10:45:98:f2:fa:c1:4b:e0:75:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jul 2 20:00:53 2025 GMT
Not After : Jul 3 20:00:53 2025 GMT
Subject: CN=9c1137a631e9189c10a7166e36201e50bd6a018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:19:03:ef:cc:c8:a0:5f:e3:0b:2d:06:97:
ca:e6:a2:63:8a:16:15:3f:10:f3:89:dd:ad:2c:56:
e2:90:59:c3:84:27:41:92:69:5e:38:da:8e:34:d8:
9a:3f:f1:c3:03:a8:94:90:07:25:5d:b2:9a:08:b7:
dc:b8:93:8d:77:9d:78:4c:6c:05:f1:e3:17:ef:01:
e5:b8:0a:8d:6d:6e:7d:96:db:da:55:76:71:e4:01:
48:ff:ef:fc:98:92:f1:70:ee:92:54:0b:bd:08:6d:
7a:4d:aa:16:b6:96:d0:f9:93:7e:50:a4:17:07:24:
84:ea:7f:e2:ce:6c:45:72:6d:a0:c8:15:d8:65:2c:
c7:16:05:11:02:ad:d6:52:ce:48:f7:7e:25:04:2b:
49:e4:2d:5c:7b:2c:1f:eb:51:cd:6e:a2:71:76:e0:
c3:62:fc:b0:c0:8e:be:2c:dc:1a:16:2e:fd:3a:86:
47:02:b8:c9:ba:77:10:27:3c:bb:29:34:ae:dd:c1:
96:16:25:10:35:14:11:dd:c2:1c:d8:e9:27:a1:7e:
08:8a:71:04:c9:1c:c4:fc:f1:6d:a7:6d:c9:c7:6a:
8c:ab:06:35:ae:ac:62:df:36:a9:fe:1c:22:05:a5:
d6:6a:9f:af:65:a4:6c:7d:ee:bf:10:b8:d0:9c:f2:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:37:A6:31:E9:18:9C:10:A7:16:6E:36:20:1E:50:BD:6A:01:8C
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:e1:4a:97:95:3a:85:91:5c:42:03:e6:5d:01:d1:a4:06:
3b:9d:0d:37:7c:1c:93:78:ec:66:51:e0:36:35:88:9f:f9:ec:
59:6d:52:3a:e5:a0:85:65:a2:c2:8a:07:fd:95:37:f6:55:4f:
33:4a:05:42:8c:32:f2:e2:50:4f:ba:5c:ee:3d:de:32:b7:83:
c9:35:90:6f:dd:47:4e:18:24:10:c9:51:02:cc:fc:a8:b9:f5:
bc:5b:49:d3:45:46:b1:3a:1e:fa:11:10:7a:f5:83:c2:e4:d4:
06:ff:74:e2:84:92:87:30:f6:82:79:21:ab:b9:bd:af:f2:72:
ee:ab:19:d7:f5:b6:ab:a8:53:5e:09:92:af:df:a8:31:99:95:
15:d4:88:08:54:ba:41:77:c1:3a:9c:c6:c8:89:2b:df:2e:2c:
e1:51:c4:53:f5:25:5e:ac:e1:e1:2d:82:74:8e:23:a9:68:66:
98:d5:14:cd:39:58:47:08:5e:d7:d8:42:ee:e6:f0:45:cc:99:
d8:4f:93:7a:af:ad:ba:9c:09:f0:0b:6c:2c:9e:1f:26:cc:6e:
e7:31:b6:9f:39:87:85:a5:05:fc:ae:92:55:58:78:ad:99:05:
90:6f:f5:a3:c3:7a:3b:f6:a5:71:f3:89:50:74:cf:08:b1:4c:
13:9d:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:58:21 2025 by rpki-client